Finding
Unowned restricted HR dataset in an active development use case
ds-hr-records contains compensation, performance and protected-characteristic columns with no accountable owner, no recorded origin, and no purpose decision. An unowned sensitive dataset cannot receive an unrestricted use approval.
Summary
- Severity
- high
- Status
- open
- Evidence freshness
- Stale
- Remediation
- No remediation planned
Potential access
Paths that could reach the data. These are capability, not proof of disclosure.
- 31,290 employee rows
- usr-contractor-41 via inherited folder permission
Observed disclosure
Only what collection actually recorded leaving the boundary.
No disclosure observed
Nothing was recorded leaving the boundary for this finding within the collection window.
Absence of an observation is not proof that nothing left. Check the collection lag for the connectors covering this surface.
Affected records
Continue the investigation
The sample code-to-cloud path is a separate synthetic scenario; a link here does not establish that it caused this finding.
Mitigations in place
A mitigation reduces exposure; it does not close the finding until verification passes.
Evidence
HR extract scan receipt restricted preview
ev-scan-60 · scan · producer collector-us-02 · collected 8 Sep 2026, 12:00 UTC (16 d ago)
SignedValid to 8 Oct 2026, 12:00 UTC